Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f9b1db8-d190-4be6-8de5-488a929f4145.roa
File:                     5f9b1db8-d190-4be6-8de5-488a929f4145.roa (raw, json)
Hash identifier:          cXv/ZKv7h3OWXDrw7qbYGluldhu2GhbbF2tt4DfcsVo=
Subject key identifier:   EB:C8:3D:8D:FF:E6:EC:8F:F3:F7:A4:E5:B0:36:67:3B:69:63:7D:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       697095D7A8B04FD45A063469FA8B54999FB950DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f9b1db8-d190-4be6-8de5-488a929f4145.roa
Signing time:             Mon 20 Oct 2025 02:51:39 +0000
ROA not before:           Mon 20 Oct 2025 02:51:39 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.138.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:95:d7:a8:b0:4f:d4:5a:06:34:69:fa:8b:54:99:9f:b9:50:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 02:51:39 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=31cb8a6f0496d4aea9190df54b6a23cb32bb8458b90389053906715afd534f66, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:02:fa:11:b9:22:7f:74:94:17:0d:66:9c:
                    80:0a:4c:2f:9b:9f:d9:40:fd:c8:fb:67:84:84:34:
                    5c:61:42:e1:92:ca:64:12:ac:8d:f9:18:3b:68:17:
                    82:9a:14:9c:ff:d7:45:7a:57:60:0e:57:ca:30:aa:
                    e4:64:a1:54:55:9b:18:27:f0:e2:1f:1e:58:ab:5f:
                    7b:78:88:e4:49:ed:52:64:aa:59:ca:ac:df:09:8c:
                    1b:aa:35:f3:f0:76:31:ba:74:cb:d3:c4:dd:37:ac:
                    11:aa:49:75:f4:78:cf:4d:09:dd:8a:52:be:2f:9f:
                    b7:50:85:0d:2f:11:89:3d:ab:d3:95:44:54:49:28:
                    e9:74:38:3d:73:83:85:b3:8a:a6:44:ed:0b:4f:94:
                    17:23:e5:f5:fb:16:de:0e:f9:45:11:76:1f:91:89:
                    96:43:5d:40:bf:73:11:15:b7:53:26:20:67:a3:79:
                    c5:e9:df:cf:d7:95:fa:57:a2:4a:d6:27:b8:09:92:
                    28:cd:ec:1b:a8:f8:6a:43:73:08:51:ab:3a:01:82:
                    ff:2c:a4:5c:5b:38:35:dd:7d:e9:ea:63:13:6a:47:
                    85:07:a5:e3:50:74:0c:21:cd:6c:19:3e:f2:39:94:
                    5f:93:27:ab:92:08:11:8d:cf:e8:1f:95:05:29:61:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C8:3D:8D:FF:E6:EC:8F:F3:F7:A4:E5:B0:36:67:3B:69:63:7D:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f9b1db8-d190-4be6-8de5-488a929f4145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.138.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:af:af:ef:b8:c8:48:c7:94:13:3f:60:c0:7c:38:72:fc:66:
         5f:71:ba:2e:2d:e2:b3:03:df:95:57:fa:73:70:2e:bf:41:5f:
         f2:97:11:bf:87:8c:81:2f:e3:88:fe:09:c3:7d:3c:71:35:4d:
         2b:b5:7b:2c:d8:db:b2:2d:38:69:88:fd:ed:17:67:5a:0e:64:
         a1:06:82:80:7f:31:61:c9:51:2c:fe:b6:90:dc:f7:cb:94:d8:
         4c:f2:b5:12:9f:26:b6:37:5b:ad:b2:59:3a:5a:dc:29:e4:19:
         bd:e1:66:75:ee:3a:13:cd:b0:7e:57:62:86:f7:d7:c2:03:5a:
         ae:39:79:9a:9a:b1:d8:5d:4e:9b:43:e9:4c:a2:a5:9c:80:34:
         4c:19:f5:4b:84:19:90:c1:00:48:79:69:1a:72:25:dd:a2:46:
         6f:0a:d3:16:8a:83:ba:4d:2b:50:35:b7:75:16:f2:04:59:8a:
         d2:12:2c:b9:a2:59:bd:04:03:44:e4:6b:81:02:0b:d3:ab:82:
         77:01:4b:f6:9d:cd:80:1a:fb:53:4f:82:08:10:3f:bf:3e:84:
         a6:91:5e:52:e2:42:72:9e:de:82:2b:fc:b6:05:1f:67:87:21:
         61:ed:a5:62:54:ae:2b:2e:18:7e:d6:3a:56:0f:03:76:81:f4:
         7e:95:5f:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaXCV16iwT9RaBjRp+otUmZ+5UN0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDI1MTM5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMWNiOGE2ZjA0OTZkNGFlYTkxOTBkZjU0YjZhMjNjYjMy
YmI4NDU4YjkwMzg5MDUzOTA2NzE1YWZkNTM0ZjY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC26AL6Ebkif3SUFw1mnIAKTC+bn9lA/cj7Z4SENFxhQuGS
ymQSrI35GDtoF4KaFJz/10V6V2AOV8owquRkoVRVmxgn8OIfHlirX3t4iORJ7VJk
qlnKrN8JjBuqNfPwdjG6dMvTxN03rBGqSXX0eM9NCd2KUr4vn7dQhQ0vEYk9q9OV
RFRJKOl0OD1zg4WziqZE7QtPlBcj5fX7Ft4O+UURdh+RiZZDXUC/cxEVt1MmIGej
ecXp38/XlfpXokrWJ7gJkijN7Buo+GpDcwhRqzoBgv8spFxbODXdfenqYxNqR4UH
peNQdAwhzWwZPvI5lF+TJ6uSCBGNz+gflQUpYcbRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU68g9jf/m7I/z96TlsDZnO2ljfaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVmOWIxZGI4LWQxOTAtNGJlNi04ZGU1LTQ4OGE5MjlmNDE0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsilQwDQYJKoZIhvcNAQELBQADggEBADWvr++4yEjHlBM/YMB8OHL8Zl9x
ui4t4rMD35VX+nNwLr9BX/KXEb+HjIEv44j+CcN9PHE1TSu1eyzY27ItOGmI/e0X
Z1oOZKEGgoB/MWHJUSz+tpDc98uU2EzytRKfJrY3W62yWTpa3CnkGb3hZnXuOhPN
sH5XYob318IDWq45eZqasdhdTptD6UyipZyANEwZ9UuEGZDBAEh5aRpyJd2iRm8K
0xaKg7pNK1A1t3UW8gRZitISLLmiWb0EA0Tka4ECC9OrgncBS/adzYAa+1NPgggQ
P78+hKaRXlLiQnKe3oIr/LYFH2eHIWHtpWJUrisuGH7WOlYPA3aB9H6VXz4=
-----END CERTIFICATE-----